CVE-2024-50301

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

security/keys: fix slab-out-of-bounds in key_task_permission

KASAN reports an out of bounds read:

BUG: KASAN: slab-out-of-bounds in __kuid_val include/linux/uidgid.h:36

BUG: KASAN: slab-out-of-bounds in uid_eq include/linux/uidgid.h:63 [inline]

BUG: KASAN: slab-out-of-bounds in key_task_permission+0x394/0x410

security/keys/permission.c:54

Read of size 4 at addr ffff88813c3ab618 by task stress-ng/4362

CPU: 2 PID: 4362 Comm: stress-ng Not tainted 5.10.0-14930-gafbffd6c3ede #15

Call Trace:

__dump_stack lib/dump_stack.c:82 [inline]

dump_stack+0x107/0x167 lib/dump_stack.c:123

print_address_description.constprop.0+0x19/0x170 mm/kasan/report.c:400

__kasan_report.cold+0x6c/0x84 mm/kasan/report.c:560

kasan_report+0x3a/0x50 mm/kasan/report.c:585

__kuid_val include/linux/uidgid.h:36 [inline]

uid_eq include/linux/uidgid.h:63 [inline]

key_task_permission+0x394/0x410 security/keys/permission.c:54

search_nested_keyrings+0

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References